Domain > civic2016.zeroonepks.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-01-22	91.108.101.217 (ClassC)

HTTP/1.1 301 Moved PermanentlyConnection: Keep-AliveKeep-Alive: timeout5, max100content-type: text/htmlcontent-length: 795date: Wed, 22 Jan 2025 14:45:27 GMTserver: LiteSpeedlocation: https://civic2016.zeroonepks.com/platform: hostingerpanel: hpanelcontent-security-policy: upgrade-insecure-requests

!DOCTYPE html>html styleheight:100%>head>meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno />title> 301 Moved Permanently/title>style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}/style>/head>body stylecolor: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;>div styleheight:auto; min-height:100%; >     div styletext-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;>        h1 stylemargin:0; font-size:150px; line-height:150px; font-weight:bold;>301/h1>h2 stylemargin-top:20px;font-size: 30px;>Moved Permanently/h2>p>The document has been permanently moved./p>/div>/div>/body>/html>

Port 443

HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout5, max100x-powered-by: PHP/7.3.33set-cookie: PHPSESSID2348f1d6b9b1f8c2acf8b42ff4c3de1f; path/; secureexpires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-store, no-cache, must-revalidatepragma: no-cachecontent-type: text/html; charsetUTF-8content-length: 6610date: Wed, 22 Jan 2025 14:45:28 GMTserver: LiteSpeedplatform: hostingerpanel: hpanelcontent-security-policy: upgrade-insecure-requests

!DOCTYPE html>html langen>head>!-- Original of ZAG -->script srchttps://ajax.googleapis.com/ajax/libs/jquery/2.1.3/jquery.min.js>/script>script srchttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.5/js/bootstrap.min.js>/script>!-- End of Original of ZAG -->	!-- Profile Free Templates form -->	meta charsetutf-8 />	meta http-equivX-UA-Compatible contentIEedge,chrome1 />	link relapple-touch-icon sizes76x76 hrefassets/img/favicon.ico>	title>Zero One Accounts 2.0/title>	meta contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, user-scalable0 nameviewport />    meta nameviewport contentwidthdevice-width />	link relapple-touch-icon sizes76x76 hrefassets/img/apple-icon.png />	link relicon typeimage/png hrefassets/img/favicon.png />	!--     Fonts and icons     -->	link relstylesheet typetext/css hrefhttps://fonts.googleapis.com/css?familyRoboto:300,400,500,700|Roboto+Slab:400,700|Material+Icons />	link relstylesheet hrefhttps://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css />	!-- CSS Files -->	link hrefassets/css/bootstrap.min.css relstylesheet />	link hrefassets/css/material-bootstrap-wizard.css relstylesheet />	!-- CSS Just for demo purpose, dont include it in your project -->	link hrefassets/css/demo.css relstylesheet />	!-- End of Profile Templates form -->	!-- jQuery -->script srcjs/invoice.js>/script>/head>body>	div classcontainer>	    div classrow>			div classcol-xs-12 col-sm-3 col-md-3 col-lg-3>h2>b>ZeroOne Login/b>/h2>/div>		    div classcol-xs-12 col-sm-6 col-md-6 col-lg-6>		        div classwizard-container>		            div classcard>		                    form action methodpost>								div classform-group>																		div classrow>		                                	div classcol-xs-11>												div classinput-group>													span classinput-group-addon>														    													/span>													div classform-group label-floating>			                                            label classcontrol-label>User Name small>(required)/small>/label>														input nameemail idemail typeemail classform-control autocompleteoff autofocus>			                                        /div>												/div>												div classinput-group>													span classinput-group-addon>														    													/span>													div classform-group label-floating>			                                          label classcontrol-label>Password small>(required)/small>/label>													  input typepassword classform-control namepwd >			                                        /div>												/div>		                                	/div>		                                	div classcol-xs-11>												div classinput-group>													span classinput-group-addon>														    													/span>													div classform-group>													  label classcontrol-label>Company Name small>(required)/small>/label>																input namecompname idcompname typetext classform-control autocompleteoff readonly>																input namecomp idcomp typehidden classform-control autocompleteoff>																!-- login code 03052023 -->																	input nameipadd idipadd typehidden classform-control autocompleteoff>																input namedevname iddevname typehidden classform-control autocompleteoff>													/div>												/div>		                                	/div>		                            	/div>		                        div classfooter>		                            div classcol-sm-12 text-center>										button typesubmit namelogin classbtn btn-next btn-fill btn-success btn-block>Log In/button>		                            /div>		                            div classclearfix>/div>		                        /div>		                    /form>		                /div>		            /div> !-- wizard container -->					br>		        /div>	        /div>!-- end row -->	    /div> !--  big container -->	/div>/body>	!--   Core JS Files   -->    script srcassets/js/jquery-2.2.4.min.js typetext/javascript>/script>	script srcassets/js/bootstrap.min.js typetext/javascript>/script>	script srcassets/js/jquery.bootstrap.js typetext/javascript>/script>	!--  Plugin for the Wizard -->	script srcassets/js/material-bootstrap-wizard.js>/script>    !--  More information about jquery.validate here: http://jqueryvalidation.org/	 -->	script srcassets/js/jquery.validate.min.js>/script>script> $(document).ready(function(){	$(document).on(blur, #email, function() {          			 var cuscode  document.getElementById(email).value ;			//-------------Customer rate from Customer Rate form --------------------					$.ajax({						url: ajaxcompanyname.php,						type: get,						dataType: JSON,						data:{ var1: abcdate, var2: cuscode },						success: function(response){								var salerate  response0.salerate;								var purrate  response0.purrate;								document.getElementById(comp).value  salerate ;								document.getElementById(compname).value  purrate ;					}						});	});		// device id and ip address  //login code 03052023				const getUA  () > {					let device  Unknown;					const ua  {						Generic Linux: /Linux/i,						Android: /Android/i,						BlackBerry: /BlackBerry/i,						Bluebird: /EF500/i,						Chrome OS: /CrOS/i,						Datalogic: /DL-AXIS/i,						Honeywell: /CT50/i,						iPad: /iPad/i,						iPhone: /iPhone/i,						iPod: /iPod/i,						macOS: /Macintosh/i,						Windows: /IEMobile|Windows/i,						Zebra: /TC70|TC55/i,					}					Object.keys(ua).map(v > navigator.userAgent.match(uav) && (device  v));					return device;				}				var logindevice  getUA() ;				$.getJSON(https://api.ipify.org?formatjson, function(data) {					var loginid  data.ip ;					//alert(loginid+logindevice);						document.getElementById(ipadd).value  loginid ;						document.getElementById(devname).value  logindevice ;				})	// end of ip and id });/script>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > civic2016.zeroonepks.com

Is this malicious?

DNS Resolutions

Port 80

Port 443